Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/112eda58-08ff-385e-b8e1-7e031a98a1e7.roa
File:                     112eda58-08ff-385e-b8e1-7e031a98a1e7.roa (raw, json)
Hash identifier:          iAeRwIhcjaHc5T+uTWOLkel9Evq7/3Wfz28YCWpdtwE=
Subject key identifier:   AF:38:FF:68:6D:A4:A6:09:73:13:6E:BE:D9:57:52:07:C4:BD:48:05
Certificate issuer:       /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial:       010D0C9F4328584B95A79A6DD292C9C0E524D280
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/112eda58-08ff-385e-b8e1-7e031a98a1e7.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     8560
IP address blocks:        216.250.112.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a7:9a:6d:d2:92:c9:c0:e5:24:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=6f296d48-4fe2-4747-b01f-75f5a1611678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b8:5b:80:47:a1:3f:78:c5:7b:81:d9:20:58:
                    46:d6:7b:ac:71:98:15:1c:49:fe:3f:73:2b:ab:f8:
                    b4:24:87:5a:0d:67:b1:32:35:2f:f7:6b:76:dd:df:
                    af:96:19:f0:79:a3:6b:bc:c9:5c:8a:f7:5b:2f:c0:
                    ec:89:62:7d:bb:39:71:ff:d0:bd:47:85:88:4d:c1:
                    a0:6a:57:b2:b0:ec:c1:08:df:56:f2:bf:d5:ac:37:
                    85:9c:66:87:3b:f2:38:9c:c1:9d:2a:02:98:22:9d:
                    c1:d1:cd:a8:23:b4:46:f3:44:46:91:4c:34:83:f2:
                    28:b6:07:9f:ec:cc:90:a0:ff:65:13:f0:68:fe:cf:
                    55:d1:0d:7a:99:65:7a:87:b9:3d:87:07:69:e1:45:
                    c4:e3:b5:5d:6e:bc:32:2a:5f:c6:0d:ef:1f:9c:01:
                    dc:fc:b4:fe:f4:2f:ad:a1:b1:70:c2:f9:4b:d8:7a:
                    65:0a:3f:82:64:13:0e:b4:19:1b:3b:f7:f6:0f:4c:
                    1f:e1:4b:da:4b:00:52:81:6a:27:48:79:07:93:17:
                    9b:fa:35:60:50:c6:73:3f:ff:0f:85:34:43:42:2c:
                    40:d2:fa:22:e9:56:0d:ea:17:cb:b3:7f:44:31:5f:
                    9f:db:5f:e8:3a:4e:06:df:66:68:db:ac:97:fc:f1:
                    e0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:38:FF:68:6D:A4:A6:09:73:13:6E:BE:D9:57:52:07:C4:BD:48:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/112eda58-08ff-385e-b8e1-7e031a98a1e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl

            X509v3 Authority Key Identifier:
                keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.250.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:79:a4:ad:7d:e3:cc:30:86:e3:ec:13:81:8e:27:76:d3:e0:
         dc:c9:e4:f4:4f:e2:bc:fe:71:ba:b0:ef:53:5d:93:f8:49:44:
         e7:63:41:22:20:df:88:11:4d:10:a9:39:e4:5a:f9:0a:9c:dd:
         92:96:a5:a0:ad:55:17:3b:38:e9:d3:15:92:9b:49:15:5e:69:
         d1:ce:f8:11:eb:b6:4b:bd:22:5c:84:70:12:8e:65:85:dd:30:
         97:c5:44:bf:bd:85:47:29:53:61:92:60:72:cf:42:e5:2c:b6:
         56:e6:0b:01:e7:09:5a:c8:3b:58:35:bb:a3:cf:f1:29:c0:89:
         6c:0a:52:ab:86:3c:c1:6a:56:63:06:e1:a5:24:cc:0b:fc:d3:
         0a:6b:85:3c:25:60:72:e3:5c:ab:31:0d:19:93:6b:0e:79:03:
         ba:08:0e:58:c3:f0:bd:10:29:80:a1:c0:08:82:0c:7f:a6:c4:
         61:b2:88:e2:95:63:7c:d8:09:cf:15:9c:2b:1c:43:38:94:e9:
         b8:71:dd:57:cf:97:9b:9c:7e:5b:4a:18:e8:09:6b:9e:25:a2:
         bf:f6:61:df:e5:07:5e:3a:b7:0a:3b:6e:14:26:8e:3c:4c:b4:
         e3:a4:81:a1:a4:4f:53:ea:1f:ef:a9:26:fc:d5:96:44:a6:f6:
         79:a2:65:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 16:11:30 2025 by rpki-client